robocalls · 6 min read

Robocall STIR/SHAKEN Explained: Your Guide to Fighting Back

The robocall STIR/SHAKEN framework is a technology standard mandated by the FCC, and we've created this guide to have it explained for consumers. It is designed to combat illegal caller ID spoofing by requiring phone carriers to verify that a call is coming from the number it claims to be. While this technology helps carriers identify and block some spam, many illegal robocalls still get through. More importantly, STIR/SHAKEN does not change your rights under the Telephone Consumer Protection Act (TCPA). If a company sends you an unwanted marketing robocall or text, it may be violating federal law. Consumers who receive these illegal communications may be entitled to recover from $500 to $1,500 per violation. Understanding how these systems work is the first step in protecting your rights and holding spammers accountable.

What Exactly Is STIR/SHAKEN?

STIR/SHAKEN is not a law in itself but rather a suite of protocols and standards that service providers use. The name is a pair of acronyms: STIR stands for Secure Telephone Identity Revisited, and SHAKEN stands for Signature-based Handling of Asserted Information Using toKENs. Together, they form a framework for FCC call authentication. The primary goal is to stop scammers from using "caller ID spoofing", which is the practice of faking the caller ID number to trick you into answering. For example, a scammer in another country could make their call appear to come from your local area code or even a government agency.

This framework acts like a digital verification system for phone calls. The originating phone carrier attaches a digital certificate to the call, attesting to its legitimacy. The receiving carrier then checks this certificate before the call reaches your phone. This process helps restore trust in caller ID by ensuring the number you see on your screen is the number that actually made the call. It is a critical piece of the nationwide strategy for robocall mitigation.

How Does STIR/SHAKEN Work in Practice?

The process works by having the caller's phone company assign an "attestation level" to the call, which is essentially a grade of trustworthiness. There are three levels. "A" attestation is the highest, meaning the provider knows the customer and has verified their right to use that phone number. "B" attestation means the provider knows the customer but not their right to use the number. "C" attestation is the lowest level, given when the provider cannot verify the call's origin, often because it came through an international gateway.

When a call reaches your provider, it analyzes this digital signature. If a call has a low attestation level (like a 'C') or a signature that looks fraudulent, your carrier might take action. This could include displaying a warning on your caller ID, such as "Spam Likely" or "Potential Fraud," or in some cases, blocking the call entirely. This system is designed to give you more information before you decide to answer a call from an unknown number.

If STIR/SHAKEN Exists, Why Do I Still Get Robocalls?

While the technology is a significant step forward, it is not a perfect solution, which is why your phone still rings with unwanted calls. One major reason is that implementation has been gradual and is not yet universal across all voice service providers, particularly smaller ones. Scammers are also constantly adapting their methods to find new loopholes in the system, such as using networks that have not fully implemented STIR/SHAKEN. They may also use large banks of real numbers to send illegal calls, which can be harder to detect.

Furthermore, STIR/SHAKEN only verifies the authenticity of the caller ID number, not the content of the call itself. A company with a verified 'A' level number can still place an illegal robocall if it sends a marketing message without your consent. The technology confirms the number is real, but it doesn't confirm the call is legal. This is why you may still receive illegal robocall harassment damages despite these new protections.

Your TCPA Rights Are Not Affected by STIR/SHAKEN

It is crucial to understand that STIR/SHAKEN is a technical tool for carriers, while the Telephone Consumer Protection Act (TCPA) is a federal law that gives you, the consumer, powerful legal rights. The TCPA makes it illegal for companies to use an autodialer or a prerecorded voice message to call your cell phone for marketing purposes without your prior express written consent. A verified caller ID does not give a company a free pass to ignore this requirement. Even if a call is authenticated by STIR/SHAKEN, it is still illegal if it violates the TCPA's consent rules.

This means you can still take legal action against companies that send you unwanted robocalls or automated texts. If a company is found to have violated the TCPA, you could be entitled to compensation of $500 per illegal call or text. If the violation is deemed willful or knowing, that amount can be tripled to $1,500. Keeping track of illegal communications is key, and you can learn more by viewing our TCPA Settlement Tracker. This article is for informational purposes only and does not create an attorney-client relationship.

Real Examples of Violations

Even with new technology, illegal robocalls and texts continue to reach consumers. Here are some common examples of communications that may be TCPA violations, regardless of whether their caller ID was verified.

"This is an important message from ABC Solar about new government rebates in your area. Homeowners can now receive a free solar panel estimate. Press 1 to speak with a representative."

This is a classic prerecorded marketing call. Unless you gave ABC Solar prior express written consent to contact you this way, this call is likely illegal. The same rules apply to other automated calls, including voicemail drop TCPA violations.

"Hi, this is XYZ Lending. You have been pre-approved for a personal loan of up to $10,000. Visit our site to claim your funds now: [link]. Reply STOP to unsubscribe."

An automated marketing text message like this also requires your prior express written consent. The fact that they include an opt-out option does not make the initial unsolicited message legal. If you never signed up for these alerts, you may have a claim.

How to Check Your Phone for Violations

Finding potential TCPA violations on your phone is easier than you might think. You can start by reviewing your call logs and text message history for communications from unknown numbers, especially from businesses you don't recognize. These often represent illegal marketing attempts. Taking a few moments to gather this evidence can be the first step toward securing compensation.

Follow these steps to document potential violations:

• Open your phone's call log and messages app.
• Look for calls or texts from businesses you have never contacted, especially those with marketing language.
• Search your text messages for common spam keywords like "offer," "winner," "free," "approved," or "claim."
• Take a clear screenshot of each potential violation. Make sure the screenshot includes the full text of the message, the sender's phone number, and the date and time it was received.
• Keep a list of these numbers and dates as a backup.

Check Your Phone Right Now

One of the fastest ways to find evidence is to look for messages where you were told how to opt out.

Open your messages and search the word STOP.

Any message that says "Reply STOP to unsubscribe" is almost certainly an automated text sent from a software platform. If you received marketing texts from a business you never gave your number to, those messages may have been sent illegally. Each one could represent a potential claim worth $500 to $1,500.

Submit screenshots at SpamClaims.com

Frequently Asked Questions about STIR/SHAKEN and Robocalls

Does STIR/SHAKEN make all robocalls illegal?

No, STIR/SHAKEN does not make robocalls illegal. Its function is to verify that the caller ID displayed on your phone is authentic. The legality of a robocall depends on the rules of the TCPA, which focus on consent. For example, informational robocalls from your doctor's office or political campaign calls are often legal, while marketing robocalls made without your prior express written consent are illegal. STIR/SHAKEN helps identify spoofed numbers, but the TCPA is what determines if the call itself violates your rights.

What is caller ID spoofing?

Caller ID spoofing is a tactic where a caller deliberately falsifies the phone number and name that appear on your caller ID display. Scammers use this to disguise their identity, often making it appear as if the call is from a local number, a legitimate business, or a government agency like the IRS. They do this to increase the chances that you will answer the phone. The STIR/SHAKEN framework is the primary technological defense designed to detect and prevent caller ID spoofing on a network level.

Can I sue for calls marked "Spam Likely"?

The "Spam Likely" tag itself does not automatically give you grounds for a lawsuit. This label is applied by your carrier based on analytics, often powered by STIR/SHAKEN data, suggesting the call is high-risk. However, the underlying call that triggered the warning may very well be illegal. If that "Spam Likely" call was an automated marketing call from a company that did not have your consent, it likely constitutes a TCPA violation, which could make you eligible for compensation.

How much money can I get from a robocall lawsuit?

Under the TCPA, statutory damages are set at $500 for each violation, such as an illegal robocall or text message. If a court finds that the company knowingly and willfully violated the law, the damages can be tripled to $1,500 per violation. Because spammers often contact consumers repeatedly, the total compensation can add up quickly. Many TCPA cases result in significant payouts, as seen in the public records listed on our TCPA Settlement Tracker. The final amount depends on the number of violations and the specific circumstances of the case.

TLDR

• Under the TCPA, you may be entitled to $500 to $1,500 per illegal robocall or text, even with STIR/SHAKEN technology in place.
• STIR/SHAKEN is a framework that phone carriers use to verify caller ID information and fight spoofing, but it doesn't stop all illegal calls.
• A call can have a verified number but still be illegal if it's a marketing robocall you didn't consent to receiving.
• The TCPA is the federal law that gives you the right to sue companies for sending unwanted robocalls and automated texts.
• Check your phone's call logs and text messages for evidence of unsolicited marketing from unknown numbers.
• Have evidence of illegal robocalls or texts? Submit your claim for a free case review.

Submit your spam screenshots for attorney review

This article is for informational purposes only and does not create an attorney-client relationship.